Skip to content

Latest commit

 

History

History
71 lines (47 loc) · 1.97 KB

acme-v2.md

File metadata and controls

71 lines (47 loc) · 1.97 KB
Raw

OpenIPC Wiki

Table of Content

How to install HTTPS certificates on your camera

Make sure your camera is accessible from the Internet on both port 80 (HTTP) and port 443 (HTTPS). You might need to set up port forwarding on your router for that.

Create an ACME account:

on camera:

uacme -y -v new

Give your camera a FQDN

Secure HTTP (Hypertext Transfer Protocol Secure, HTTPS) cannot be issued to a bare IP address, you need a Fully Qualified Domain Name (FQDN) for your camera. That is how your camera will be accessed over HTTPS.

Create an account with any Domain Name Register and register a domain name, e.g. mysuperduperdomain.com.

Set up a DNS zone for that domain name and create a record for your camera in that domain zone.

DNS Records
mysuperduperdomain.com
---------------------------------------
Type    Host       IP Address       TTL
A       ipc-001    75.123.45.555    600

where 75.123.45.555 is your public IP address.

Set up port forwarding if your camera is behind NAT.

Add port forwarding from port 80 of WAN interface to port 80 of your camera's local IP address.

75.123.45.555:80 => 192.168.1.10:80

If you have several devices on your network serving public HTTP requests then add your camera domain name to HTTP proxy.

Issue a certificate for your domain:

on camera:

uacme -y -v -h /usr/share/uacme/uacme.sh -t EC issue ipc-001.mysuperduperdomain.com

Set up a local DNS record override

You can add an override record to /etc/hosts file on your machine

echo "192.168.1.10  ipc-001.mysuperduperdomain.com" >> /etc/hosts

or you could create a record on your local DNS server like pi.hole so that anyone using that DNS server could have secure access to the camera, too.

Restart majestic and test access

Open your favorite web browser and go to https://ipc-001.mysuperduperdomain.com/